Ndrv setspec() Integer Overflow - Revision history

Dialexio: Dat underscore.

2012-10-04T22:02:03Z

Dat underscore.

2012-10-04T17:42:37Z

2011-09-23T05:23:06Z

Slides added to keep things simple

2011-09-23T04:55:45Z

Swapped links

2011-09-22T21:04:33Z

2011-09-22T18:39:42Z

Will make an attempt at copying over the information in the slides after I sleep. Just wanted to make sure I didn't forget

2011-07-08T22:05:39Z

2011-07-07T19:22:41Z

A bit of expanding.

2011-07-07T17:52:10Z

2011-07-07T06:43:36Z

initial page - is this correct so far?

New page

This is the kernel exploit used in [[i0n1c]]s untether.
{{stub}}

← Older revision		Revision as of 22:02, 4 October 2012
Line 1:		Line 1:
		+	{{DISPLAYTITLE:ndrv_setspec() Integer Overflow}}
−	{{lowercase}}
	The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.		The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.

@@ Line 1: / Line 1: @@
 The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization|ASLR]] implementation.
 == Vulnerability ==
-This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [http://www.slideshare.net/i0n1c/blackhat-usa-2011-stefan-esser-ios-kernel-exploitation Exploiting The iOS Kernel] presentation starting at slide 41.
+This exploit was talked about by [[i0n1c]] at [[Timeline|Blackhat US 2011]] in his [http://www.slideshare.net/i0n1c/blackhat-usa-2011-stefan-esser-ios-kernel-exploitation Exploiting The iOS Kernel] presentation starting at slide 41.
 [[Category:Exploits]]

← Older revision		Revision as of 05:23, 23 September 2011
Line 5:		Line 5:
	This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [http://www.slideshare.net/i0n1c/blackhat-usa-2011-stefan-esser-ios-kernel-exploitation Exploiting The iOS Kernel] presentation starting at slide 41.		This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [http://www.slideshare.net/i0n1c/blackhat-usa-2011-stefan-esser-ios-kernel-exploitation Exploiting The iOS Kernel] presentation starting at slide 41.

		+	[[Image:I0n1c-slide42.jpg]]
		+	[[Image:I0n1c-slide43.jpg]]
		+	[[Image:I0n1c-slide44.jpg]]
		+	[[Image:I0n1c-slide45.jpg]]
		+	[[Image:I0n1c-slide46.jpg]]
	[[Category:Exploits]]		[[Category:Exploits]]

@@ Line 3: / Line 3: @@
 == Vulnerability ==
-This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [https://media.blackhat.com/bh-us-11/Esser/BH_US_11_Esser_Exploiting_The_iOS_Kernel_Slides.pdf Exploiting The iOS Kernel] presentation starting at slide 41.
+This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [http://www.slideshare.net/i0n1c/blackhat-usa-2011-stefan-esser-ios-kernel-exploitation Exploiting The iOS Kernel] presentation starting at slide 41.
 [[Category:Exploits]]

← Older revision		Revision as of 21:04, 22 September 2011
Line 4:		Line 4:
	== Vulnerability ==		== Vulnerability ==
	This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [https://media.blackhat.com/bh-us-11/Esser/BH_US_11_Esser_Exploiting_The_iOS_Kernel_Slides.pdf Exploiting The iOS Kernel] presentation starting at slide 41.		This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [https://media.blackhat.com/bh-us-11/Esser/BH_US_11_Esser_Exploiting_The_iOS_Kernel_Slides.pdf Exploiting The iOS Kernel] presentation starting at slide 41.
		+
		+	[[Category:Exploits]]

← Older revision		Revision as of 18:39, 22 September 2011
Line 2:		Line 2:
	The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.		The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.

		+	== Vulnerability ==
−	{{stub\|jailbreaking}}
		+	This exploit was talked about by [[I0n1c]] at Blackhat US 2011 in his [https://media.blackhat.com/bh-us-11/Esser/BH_US_11_Esser_Exploiting_The_iOS_Kernel_Slides.pdf Exploiting The iOS Kernel] presentation starting at slide 41.

← Older revision		Revision as of 22:05, 8 July 2011
Line 1:		Line 1:
	{{DISPLAYTITLE:ndrv_setspec() Integer Overflow}}		{{DISPLAYTITLE:ndrv_setspec() Integer Overflow}}
	The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.		The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.
		+
−	{{stub}}
		+	{{stub\|jailbreaking}}

← Older revision		Revision as of 19:22, 7 July 2011
Line 1:		Line 1:
		+	{{DISPLAYTITLE:ndrv_setspec() Integer Overflow}}
−	The '''Ndrv setspec() Integer Overflow''' is the kernel exploit used in [[i0n1c]]'s untether.
		+	The '''ndrv_setspec() Integer Overflow''' is a vulnerability found in the kernel. [[i0n1c]] used this to make the first (publicly released) "untethering" exploit that bypassed Apple's [[Wikipedia:Address space layout randomization\|ASLR]] implementation.
	{{stub}}		{{stub}}

← Older revision		Revision as of 17:52, 7 July 2011
Line 1:		Line 1:
−	~~This~~ is the kernel exploit used in [[i0n1c]]s untether.	+	The '''Ndrv setspec() Integer Overflow''' is the kernel exploit used in [[i0n1c]]'s untether.
	{{stub}}		{{stub}}